Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-6213 |
critical | 10.0 | 0.0033 | 2026-05-08 | A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local | |
CVE-2026-64827 |
critical | 9.3 | 0.0083 | 2026-08-03 | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a | |
CVE-2026-96251 |
high | 8.8 | 0.0069 | 2026-10-13 | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized a | |
CVE-2026-85817 |
high | 8.8 | 0.0072 | 2026-10-13 | Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized att | |
CVE-2026-9561 |
high | 8.8 | 0.0028 | 2026-07-14 | Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the au | |
CVE-2026-13059 |
high | 8.6 | 0.0038 | 2026-07-22 | An authenticated user with low privileges may be able to perform unauthorized reads and writes on da | |
CVE-2026-54730 |
high | 8.6 | 0.0068 | 2026-08-18 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, the enterprise Google | |
CVE-2026-83522 |
high | 8.1 | 0.0082 | 2026-10-13 | Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized | |
CVE-2026-88210 |
high | 7.8 | 0.0044 | 2026-10-13 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized | |
CVE-2026-108433 |
high | 7.8 | 0.0042 | 2026-10-15 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized | |
CVE-2026-102234 |
high | 7.4 | 0.0082 | 2026-10-13 | Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized att | |
CVE-2026-18705 |
high | 7.1 | 0.0036 | 2026-08-11 | An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read | |
CVE-2026-53789 |
high | 7.1 | 0.0036 | 2026-08-13 | rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender t | |
CVE-2026-116016 |
high | 7.1 | 0.0025 | 2026-10-24 | yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated | |
CVE-2026-1789 |
medium | 6.9 | 0.0029 | 2026-04-24 | A vulnerability in the browser-based remote management interface may allow an administrator to acces | |
CVE-2026-0390 |
medium | 6.7 | 0.0032 | 2026-04-14 | Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized atta | |
CVE-2026-50106 |
medium | 6.5 | 0.0021 | 2026-10-21 | When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anch | |
CVE-2026-39807 |
medium | 6.3 | 0.0053 | 2026-05-01 | Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthent | |
CVE-2026-48980 |
medium | 6.3 | 0.0018 | 2026-06-18 | pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2 | |
CVE-2026-111869 |
medium | 5.5 | 0.0053 | 2026-10-18 | A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of th | |
CVE-2026-29134 |
medium | 5.3 | 0.0022 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain | |
CVE-2026-12058 |
medium | 5.3 | 0.0017 | 2026-06-12 | The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed. | |
CVE-2026-19579 |
medium | 5.3 | 0.0034 | 2026-08-11 | Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the ass | |
CVE-2026-114617 |
medium | 4.2 | 0.0023 | 2026-10-22 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMix | |
CVE-2026-58239 |
low | 3.7 | 0.0035 | 2026-08-11 | SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated | |
CVE-2026-34486 |
— | — | 0.9850 | 2026-04-09 | Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass o | KEV |
CVE-2026-24120 |
— | — | 0.0090 | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is |